3081 matches found
CVE-2026-69378
Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network...
CVE-2026-69380
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-69355
External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network...
CVE-2026-55007
Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...
NtlmRelayToEWS
ntlmRelayToEWS Autor: Arno0x0x - @Arno0x0x ntlmRelayToEWS es una herramienta para realizar ataques de retransmisión NTLM en Exchange Web Services EWS. Inicia un SMBListener en el puerto 445 y un HTTPListener en el puerto 80, esperando la conexión entrante de la víctima. Una vez que la víctima se...
CVE-2026-69641
CVE-2026-69641 is a missing authorization vulnerability in Microsoft Exchange Server that allows an authorized attacker to elevate privileges over a network . The CVSS v3.1 base score is 9.1 (Critical) with a scope change, indicating high impact on confidentiality, integrity, and availability onc...
EUVD-2026-73146
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73130
Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network...
CVE-2026-69382
CVE-2026-69382 affects Microsoft Exchange Server due to the use of a broken or risky cryptographic algorithm , allowing an unauthorized, unauthenticated attacker to disclose information over a network . The CVSS 3.1 base score is 5.9 (MEDIUM) , reflecting a network attack vector with high complex...
CVE-2026-69380
CVE-2026-69380 is a missing authorization vulnerability in Microsoft Exchange Server that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.1 (HIGH) , with high impact to confidentiality and integrity and no availability impact. Attack complexity is low, ...
EUVD-2026-73129
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73128
Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network...
EUVD-2026-73127
Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network...
CVE-2026-69375
CVE-2026-69375 is an authorization bypass through user-controlled key vulnerability in Microsoft Exchange Server that allows an authorized attacker to perform tampering over a network. The vulnerability carries a CVSS 3.1 score of 6.5 (MEDIUM) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N ...
CVE-2026-69378
Microsoft Exchange Server is affected by an uncontrolled recursion vulnerability that allows an unauthenticated, remote attacker to cause a denial of service over the network. The CVSS 3.1 score is 7.5 (HIGH) with low attack complexity, no privileges required, and no user interaction needed. No s...
CVE-2026-69361
A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network . The CVSS 3.1 score is 6.5 (Medium) with high confidentiality impact but no integrity or availability impact, indicating the primary risk is informatio...
EUVD-2026-73125
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-73126
Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network...
CVE-2026-69356
CVE-2026-69356 is a CRITICAL (CVSS 9.3) vulnerability in Microsoft Exchange Server involving improper neutralization of input during web page generation, commonly referred to as cross-site scripting (XSS) . An unauthorized network attacker can leverage this flaw to perform spoofing , with high im...